Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: uWhab63mv61xrb/xLkLNd6AlEOiCsq5pJo7AQFaEXCI=
Subject key identifier: 95:59:5A:1F:C1:0F:95:62:9B:26:B7:96:2E:2B:0F:94:D7:9F:C3:DA
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 01A165A243AEBEC1D96269D5E44AF04FBCD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 1270
Signing time: Thu 22 Oct 2026 22:01:35 +0000
Manifest this update: Thu 22 Oct 2026 22:01:35 +0000
Manifest next update: Fri 23 Oct 2026 22:01:35 +0000
Files and hashes: 1: VI3zjeHZdDu0ypEH0uILb9Lb4YA.roa (hash: i7eNNz6Wv21ngloC0Wp7tGBt5qo7AjOzv44UBAKSHF0=)
2: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: PVKpDAP3TOLsODBajqOgsA0B5dXAMZsYEVuHMNMkkVA=)
3: peSkqWCqswhUNJGM0RGGvifGjM4.roa (hash: dUUdnXPhtGozYsTQ/nVdXfCGkdsE7fr6bznqx68dgNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:a2:43:ae:be:c1:d9:62:69:d5:e4:4a:f0:4f:bc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Oct 22 22:01:35 2026 GMT
Not After : Oct 23 22:01:35 2026 GMT
Subject: CN=95595a1fc10f95629b26b7962e2b0f94d79fc3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:0f:25:44:e4:96:fe:55:fe:d9:a2:f4:26:
c4:23:1f:d2:13:09:3a:ae:5f:d8:a2:b2:ea:09:b1:
f3:dd:20:0c:b6:26:18:9a:10:0c:0a:9e:b8:8d:7e:
19:22:00:00:5f:33:bc:35:10:7f:74:e7:14:d4:0f:
ef:5e:41:91:ec:a7:29:46:e0:27:9a:68:1c:11:88:
af:3d:9c:38:7a:f6:3b:2d:6a:f4:9a:35:ac:f0:d1:
74:30:98:9f:17:81:60:d1:af:80:4d:b4:41:bd:7b:
c9:28:bb:5f:cc:17:aa:1a:3f:e5:8f:3e:76:ae:82:
f5:9e:ca:30:02:2b:6e:ed:03:2a:5e:92:66:6c:78:
ec:94:3f:b0:d0:49:e1:80:55:f0:34:4a:2a:ad:7b:
b3:f2:ce:29:07:9c:99:b1:c7:6d:eb:5a:e7:f5:4e:
de:5d:2a:40:a2:35:b8:59:54:b8:e2:dc:74:13:51:
92:60:89:a6:be:db:f0:ea:3d:2e:54:61:5f:cb:ef:
c2:1c:a9:42:5f:2b:77:8d:d4:34:ae:df:ce:b8:fb:
27:8b:07:54:4a:1c:c8:bb:75:72:82:33:3b:a5:23:
fc:26:d0:95:a6:3e:5f:53:96:21:e6:09:e3:df:ee:
b9:77:17:80:db:39:fc:94:87:11:36:50:a2:f0:35:
b8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:59:5A:1F:C1:0F:95:62:9B:26:B7:96:2E:2B:0F:94:D7:9F:C3:DA
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:86:ea:13:1f:d4:8a:2b:a8:e5:c3:41:c8:1b:fe:47:0c:0d:
ec:1a:fe:54:60:eb:3d:70:d7:89:31:53:44:3c:ee:0d:78:ae:
df:be:39:73:f2:a1:de:06:4b:6a:4b:92:96:f0:f7:7a:07:78:
3f:76:de:72:0e:3e:59:0d:e8:9f:71:21:a8:ab:bb:83:32:5b:
fb:99:5f:fd:ff:9c:f2:ce:c1:51:75:06:49:ca:52:6a:78:ac:
0b:78:7f:6e:96:91:b2:0d:4b:6f:1e:42:a4:81:fd:f2:e7:9d:
cd:18:11:68:e9:d1:9e:a2:cb:74:3a:25:cc:26:3a:28:be:2d:
51:f2:ed:61:f5:ac:5d:ce:56:0b:8d:dc:79:83:46:fc:07:24:
04:e2:bd:a1:68:95:ff:5d:d9:e9:4c:7c:4c:bd:fb:c7:bd:8d:
d0:4c:df:0b:fe:53:26:a1:2b:da:90:8a:ef:f1:76:92:85:5d:
91:1d:0a:85:f0:51:21:e0:cd:04:9d:9c:a2:4f:87:7b:18:94:
bc:78:25:5c:90:92:f1:7e:11:69:85:37:bf:f0:10:71:8e:9c:
70:7e:a1:0a:2f:0f:c9:69:3c:b0:ce:f0:ea:f8:fd:2d:e1:e9:
9d:80:a2:67:ee:9f:a0:8f:dd:65:a3:13:c4:3f:7e:59:13:5b:
38:29:cd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:15:10 2026 by rpki-client